
Security News
GPT-6 Astra Attempts Supply Chain Attacks Against Open Source Maintainers in Testing
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.
@crestdeploymentsystems/trusted-fetch
Advanced tools
x402 fetch with pre-payment trust check. Drop-in replacement for @x402/fetch that calls supership before paying.
x402 payments with pre-payment trust verification. Drop-in replacement for @x402/fetch that checks service trust before sending money.
npm install @crestdeploymentsystems/trusted-fetch
import { wrapFetchWithPayment } from "@x402/fetch";
import { createTrustedFetch } from "@crestdeploymentsystems/trusted-fetch";
// Your normal x402 setup
const fetchWithPayment = wrapFetchWithPayment(fetch, client);
// Wrap it with trust verification
const trustedFetch = createTrustedFetch(fetchWithPayment, {
threshold: 50, // minimum trust score (0-100)
onCheck: (url, trust) => console.log(`${url}: ${trust.score}/${trust.grade}`),
onRefuse: (url, trust) => console.log(`Refused to pay ${url}: score too low`),
});
// Use exactly like fetchWithPayment -- but safe
const res = await trustedFetch("https://some-x402-service.com/api/data", {
method: "GET",
});
Before every x402 payment, trustedFetch calls supership.crestsystems.ai/check to get a trust score for the service. If the score is below your threshold, the payment is refused and an error is thrown. Your money stays in your wallet.
The check is free. Skipping it is expensive.
| Option | Default | Description |
|---|---|---|
threshold | 50 | Minimum trust score (0-100) to proceed with payment |
checkUrl | supership.crestsystems.ai/check | Trust check endpoint |
onCheck | null | Callback after every trust check |
onRefuse | null | Callback when payment is refused |
Agents making x402 payments have no way to know if a service is trustworthy before paying. trusted-fetch adds a pre-flight trust check that protects against:
Crest Deployment Systems -- deploying scalable intelligence.
FAQs
x402 fetch with pre-payment trust check. Drop-in replacement for @x402/fetch that calls supership before paying.
We found that @crestdeploymentsystems/trusted-fetch demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.